diff --git a/.gitignore b/.gitignore
index 0adae96..4e4f490 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/nginx-1.20.0.tar.gz
+SOURCES/nginx-1.20.1.tar.gz
diff --git a/.nginx.metadata b/.nginx.metadata
index ed7f7a9..743405a 100644
--- a/.nginx.metadata
+++ b/.nginx.metadata
@@ -1 +1 @@
-71dc4916e9ac7e15b03f7ea71577f72e0dd5dff1 SOURCES/nginx-1.20.0.tar.gz
+6b4ab4eff3c617e133819f43fdfc14708e593a79 SOURCES/nginx-1.20.1.tar.gz
diff --git a/SPECS/nginx.spec b/SPECS/nginx.spec
index c807d65..7e5bdd5 100644
--- a/SPECS/nginx.spec
+++ b/SPECS/nginx.spec
@@ -18,8 +18,8 @@
 
 Name:              nginx
 Epoch:             1
-Version:           1.20.0
-Release:           2%{?dist}
+Version:           1.20.1
+Release:           1%{?dist}
 
 Summary:           A high performance web server and reverse proxy server
 Group:             System Environment/Daemons
@@ -474,6 +474,9 @@ fi
 
 
 %changelog
+* Tue Dec 21 2021 Joe Orton <jorton@redhat.com> - 1:1.20.1-1
+- rebase to 1.20.1 (addressing CVE-2021-23017)
+
 * Fri Aug 20 2021 Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.0-2
 - Resolves: #1991796 - build nginx with --with-compat